diff options
author | Gianni Tedesco <gianni.tedesco@citrix.com> | 2010-09-23 19:16:00 +0100 |
---|---|---|
committer | Gianni Tedesco <gianni.tedesco@citrix.com> | 2010-09-23 19:16:00 +0100 |
commit | 0809fbef31f2ab27189ead8eb8124d05ad95189b (patch) | |
tree | 9bb3455b3075788dcc40aeb3ee2bcea756e6603d | |
parent | ce675adf0da0c129d4818518218242e929d29a4a (diff) | |
download | xen-0809fbef31f2ab27189ead8eb8124d05ad95189b.tar.gz xen-0809fbef31f2ab27189ead8eb8124d05ad95189b.tar.bz2 xen-0809fbef31f2ab27189ead8eb8124d05ad95189b.zip |
xl: Fix stack corruption caused by non-terminated call to libxl__xs_writev
Signed-off-by: Gianni Tedesco <gianni.tedesco@citrix.com>
Tested-by: Christoph Egger <Christoph.Egger@amd.com>
Acked-by: Ian Jackson <ian.jackson@eu.citrix.com>
Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com>
-rw-r--r-- | tools/libxl/libxl.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tools/libxl/libxl.c b/tools/libxl/libxl.c index 8b086b9123..4e1fd04284 100644 --- a/tools/libxl/libxl.c +++ b/tools/libxl/libxl.c @@ -1718,7 +1718,7 @@ retry_transaction: vm_path = libxl__xs_read(&gc,t,libxl__sprintf(&gc, "%s/vm", p->dom_path)); if (vm_path) { /* Now write the vncpassword into it. */ - pass_stuff = libxl__calloc(&gc, 2, sizeof(char *)); + pass_stuff = libxl__calloc(&gc, 3, sizeof(char *)); pass_stuff[0] = "vncpasswd"; pass_stuff[1] = info->vncpasswd; libxl__xs_writev(&gc,t,vm_path,pass_stuff); |